Bitcoin Forum
April 28, 2024, 02:59:30 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 2 3 4 5 [6] 7 »  All
  Print  
Author Topic: Reminder: zero-conf is not safe; $1000USD reward posted for replace-by-fee patch  (Read 18238 times)
TierNolan
Legendary
*
Offline Offline

Activity: 1232
Merit: 1083


View Profile
May 10, 2013, 12:37:03 PM
 #101

Also, your comment about blacklisting is really not the same at all (nor feasible).  Zero-conf replacement requires only a few miners to participate for it to make zero-conf transactions pretty much useless in zero-trust transactions.  That's not the same as blacklisting, which needs 100% miner participation to work. 

No, it doesn't even require > 50%.

For example, assume 75% of the miners are profit seeking and 10% of the miners said that they won't build on blocks with any of <list> of transactions for at least 2 blocks.

If you add a block containing one of those transactions, then there is a 10% chance that the alternative miners will get the next block.  Rational miners would then switch to that block, since if it wins, it get 100% of the hashing.  If the other block wins, it still only gets 90% of the hashing, since the "bad" transaction has to be buried two deep.

The effect is that 85% of the miners end up supporting the blacklisting.

Mine a "clean" block
- you get 100% of miners to build on yours

Miner a "tainted" block
- you get at most 90% of the miners to build on yours

If the 10% find another block
- there are 2 equal POW blocks
-- miners following the rules stay on the first block (15%)
-- taint enforcers stay on alt branch (10%)
-- rational miners switch to alt branch (75%)

If the 90% find the next block
-- all switch to that chain

So, if you mine a "bad" block, you have a 10% chance of it being matched by the taint enforcers and then an 85% of it then be superseded.  This gives an 8.5% chance of you losing your tx and minting rewards. 

As long as only a small number of transactions are tainted, it isn't worth including them.

The defense would be to have lots of p2p mixing operations.  If most coins are tainted, then none are.

1LxbG5cKXzTwZg9mjL3gaRE835uNQEteWF
1714316370
Hero Member
*
Offline Offline

Posts: 1714316370

View Profile Personal Message (Offline)

Ignore
1714316370
Reply with quote  #2

1714316370
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714316370
Hero Member
*
Offline Offline

Posts: 1714316370

View Profile Personal Message (Offline)

Ignore
1714316370
Reply with quote  #2

1714316370
Report to moderator
Stephen Gornick
Legendary
*
Offline Offline

Activity: 2506
Merit: 1010


View Profile
May 20, 2013, 03:21:06 AM
 #102

Is it conceivable that a judge could conclude that because the miner was running this replace-by-fee code and received compensation for doing this that the miner could liable for losses by the merchant? [Edit: or charged as an accessory to the crime of fraud even?]

Unichange.me

            █
            █
            █
            █
            █
            █
            █
            █
            █
            █
            █
            █
            █
            █
            █
            █


kjj
Legendary
*
Offline Offline

Activity: 1302
Merit: 1024



View Profile
May 20, 2013, 06:36:27 AM
 #103

Is it conceivable that a judge could conclude that because the miner was running this replace-by-fee code and received compensation for doing this that the miner could liable for losses by the merchant? [Edit: or charged as an accessory to the crime of fraud even?]

Sure.  But it would be silly to do so.

The blockchain is what defines the order that transactions happen.  If a miner can be liable for replacing a transaction, why not for failing to replace it?  The network makes no promises to deliver transactions to nodes in some magically special order, except when that delivery is as a block.  What if the miner gets the replacement first?  How do you prove otherwise?

Judges, in general, aren't stupid, and this is simple stuff, easily explained.

17Np17BSrpnHCZ2pgtiMNnhjnsWJ2TMqq8
I routinely ignore posters with paid advertising in their sigs.  You should too.
Peter Todd (OP)
Legendary
*
expert
Offline Offline

Activity: 1120
Merit: 1150


View Profile
May 20, 2013, 07:50:23 AM
 #104

Is it conceivable that a judge could conclude that because the miner was running this replace-by-fee code and received compensation for doing this that the miner could liable for losses by the merchant? [Edit: or charged as an accessory to the crime of fraud even?]

Sure.  But it would be silly to do so.

The blockchain is what defines the order that transactions happen.  If a miner can be liable for replacing a transaction, why not for failing to replace it?  The network makes no promises to deliver transactions to nodes in some magically special order, except when that delivery is as a block.  What if the miner gets the replacement first?  How do you prove otherwise?

+1

bytemaster
Hero Member
*****
Offline Offline

Activity: 770
Merit: 566

fractally


View Profile WWW
May 20, 2013, 07:39:58 PM
 #105

So here is a business model for an unethical company:

1) Invest in a large amount of mining hardware and create a p2pool mining pool.
2) Create a bitcoin client with a checkbox for 'attempt double spend'
3) Anytime the user checks the 'attempt double spend', one trx is sent to the general network, and
    another is sent to the mining pool where the fee is 50% of the 'double spend'.
4) Anytime a double spend is 'successful' (this pool finds a block) it has a high-payout due to extra fees.

Miners who join this 'unethical' company will see more $$ than those who mine under existing pools.  Scammers of the world would have an 'easy-to-use' way to 'double-spend' some fraction of the time. 

The only way to shutdown this 'unethical' pool / client would be for everyone to wait one confirmation *or* to know your customer.

Considering such an attack could be setup and launched today, we are really operating under a false sense of security to accept 0 confirmation transactions from anonymous sources.

Given that this is possible today, everyone should *assume* it is going on.  Turning an attack into a 'feature' could have added benefits.  For example:

Suppose a thief stole your bitcoins, you could have an alarm triggered the moment you saw a transaction on the network.  You could then quickly issue a 'lock-down' transaction that would send the coins to a 'dispute mediation' address and include a higher fee.   Honest miners would then see the 'conflict' and prefer the transaction to the dispute mediator over the earlier transaction for 2 reasons:  1) reputation and 2) financial incentive. 

The reality is that miners could already offer this 'service', but if it was 'built-in' then everyone would be able to take advantage of 'trx replacement' as a SOLUTION to fraud/theft instead of just a way to commit fraud/theft.

https://fractally.com - the next generation of decentralized autonomous organizations (DAOs).
caveden
Legendary
*
Offline Offline

Activity: 1106
Merit: 1004



View Profile
May 21, 2013, 06:32:14 AM
 #106

The only way to shutdown this 'unethical' pool / client would be for everyone to wait one confirmation *or* to know your customer.

You could also try to blacklist fraudsters' address with this technique.
Additionally, merchants willing to accept 0-conf transactions from unknown customers could also subscribe to insurance contracts that would reimburse the merchant in case of loss. To decrease the chances of fraud, these insurers could directly finance miners (send a part of their premium to "honest" miners which don't accept double-spends, at least not for insured transactions). The insurers could also make assurance contracts, but I'm not sure if you can select a minimal transaction-set you want to assure, would need to reread about it.

Considering such an attack could be setup and launched today, we are really operating under a false sense of security to accept 0 confirmation transactions from anonymous sources.

Given that this is possible today, everyone should *assume* it is going on. 

Perhaps. On the other hand... it's not really happening. There are other things at play. For significant amounts, people don't accept 0-conf from unknown customers. And for cheap transactions.. is it really worth trying to defraud the merchant? Also... most people are honest and wouldn't steal.
So, maybe it's just too early to start worrying about this.

Suppose a thief stole your bitcoins, you could have an alarm triggered the moment you saw a transaction on the network.

Yes, clients should sound alarms if they detect a double-spend attempt. Also, if eventually this "malicious pool" is created, merchants' clients should even try to subscribe to it in order to known if they are under attack. The only problem is that the pool could easily disconnect those that don't submit a minimum amount of shares.

You could then quickly issue a 'lock-down' transaction that would send the coins to a 'dispute mediation' address and include a higher fee.   Honest miners would then see the 'conflict' and prefer the transaction to the dispute mediator over the earlier transaction for 2 reasons:  1) reputation and 2) financial incentive. 

I wouldn't call that "dispute mediation" but yeah, that's a good idea. Insurers could also attempt that. (you should not expect merchants themselves to take all these measures... merchants don't want to worry with these technicalities... they have their own business to focus on)
Maged
Legendary
*
Offline Offline

Activity: 1204
Merit: 1015


View Profile
May 21, 2013, 07:03:32 AM
 #107

The reality is that miners could already offer this 'service', but if it was 'built-in' then everyone would be able to take advantage of 'trx replacement' as a SOLUTION to fraud/theft instead of just a way to commit fraud/theft.
No. Anybody spending money that is willing to defraud the receiver of the money would be willing to spend up to all but one satoshi in fees to commit a double-spend, unless they are an uneconomic attacker. Since we're assuming the worst in this thread, we must assume this to always be the case. Therefore, the only defense to this attack is for the victim of the double-spend to re-spend the entirety of the transaction to fees, preventing the attacker from winning most of the time. Therefore, the best SOLUTION to fraud/theft is the current one, because honest nodes would ignore BOTH transactions with larger fees (the re-spend to fees on the merchant side could be a replacement of a send-to-self transaction broadcast when the initial transaction was received), meaning that attackers would almost never win (they could still win thanks to propagation delay) and merchants would not lose in proportion to how many honest nodes there are.

Ashaman
Newbie
*
Offline Offline

Activity: 20
Merit: 0



View Profile
June 04, 2013, 11:59:42 AM
 #108

-1
IMHO, this breaks far more than it fixes.
iCEBREAKER
Legendary
*
Offline Offline

Activity: 2156
Merit: 1072


Crypto is the separation of Power and State.


View Profile WWW
July 06, 2015, 01:32:01 PM
 #109

Reality check - when I look around at the complaints people have about Bitcoin, merchants constantly being double spent doesn't come up. It isn't "snake oil" to point this out and you should give the people actually using Bitcoin more credit - they know how to avoid losses.

Your double-spending wallet edition is just theoretical - you have to find miners that will take your double spends, and then you have to find users who are willing to accept that most often their attempts to double spend will fail because the bad miners won't find the next block. And then people who use it will discover that if they aren't perfectly anonymous then they will get taken to court for wire fraud, and most likely they will lose.

So there are lots of reasons why people might not do this. And that may explain why this topic is so old and stale. It was being brought up back in 2010 and here we are, years later, people still arguing about this topic and yet there are many more thousands of merchants still accepting these transactions and not losing money.

I remember another topic that used to create endless raging arguments, the 10 minute block interval. Eventually that was solved by Charlie creating Litecoin and now people who hate the 10 minute wait can just go use that instead of creating endless forum threads. I think it's a good way to resolve such disputes - go set up an alt coin that works the way you think it should and then let the market figure it out. Or maybe the Litecoin guys would be willing to incorporate such a change.

Update: Hearn@google.mil's FUD and bitchcraft has failed; RBF isn't old and stale any more.

Quote
Peter Todd Fri, 19 Jun 2015

Yesterday F2Pool, currently the largest pool with 21% of the hashing
power, enabled full replace-by-fee (RBF) support after discussions with
me. This means that transactions that F2Pool has will be replaced if a
conflicting transaction pays a higher fee. There are no requirements for
the replacement transaction to pay addresses that were paid by the
previous transaction.


Instead of creating endless forum threads about 1MB blocks, why don't you go set up an alt coin that works the way you think it should and then let the market figure it out?


██████████
█████████████████
██████████████████████
█████████████████████████
████████████████████████████
████
████████████████████████
█████
███████████████████████████
█████
███████████████████████████
██████
████████████████████████████
██████
████████████████████████████
██████
████████████████████████████
██████
███████████████████████████
██████
██████████████████████████
█████
███████████████████████████
█████████████
██████████████
████████████████████████████
█████████████████████████
██████████████████████
█████████████████
██████████

Monero
"The difference between bad and well-developed digital cash will determine
whether we have a dictatorship or a real democracy." 
David Chaum 1996
"Fungibility provides privacy as a side effect."  Adam Back 2014
Buy and sell XMR near you
P2P Exchange Network
Buy XMR with fiat
Is Dash a scam?
phelix
Legendary
*
Offline Offline

Activity: 1708
Merit: 1019



View Profile
July 08, 2015, 08:29:38 AM
 #110

Quote
Peter Todd Fri, 19 Jun 2015

Yesterday F2Pool, currently the largest pool with 21% of the hashing
power, enabled full replace-by-fee (RBF) support after discussions with
me. This means that transactions that F2Pool has will be replaced if a
conflicting transaction pays a higher fee. There are no requirements for
the replacement transaction to pay addresses that were paid by the
previous transaction.
Haha, that went well.


It's an illusion to believe Bitcoin is a completely trust less system. We need a majority of miners to act responsibly. This has shown in the 2013 database fork and recently with the lazy block validating.

There is no problem trusting the miners - only with pools controlling too much mining power.

IMHO something like a mining codex will be established sooner or later.
JorgeStolfi
Hero Member
*****
Offline Offline

Activity: 910
Merit: 1003



View Profile
July 08, 2015, 06:39:00 PM
 #111

It's an illusion to believe Bitcoin is a completely trust less system. We need a majority of miners to act responsibly. This has shown in the 2013 database fork and recently with the lazy block validating.

There is no problem trusting the miners - only with pools controlling too much mining power.

Last time I checked, the top 3 pools and the top 4 Chinese pools had ~55% of the total hashpower.  The top 5 pools (the Chinese one plus the Ukranian BitFury) had over 70%.

Objectively, bitcoin failed.  Users and holders must trust that those top 5 miners will not do anything nasty.  If they conspired to put all other miners out of business, they could do it.  If they agreed to block an account forever, they could do it.  If they agreed to make some change to the protocol, they could easily force everybody do accept it.  There would be much cursing ang grawing of teeth, but the only choices for all users and holders would be to either accept the change, of lose their coins.  Since the whole point of bitcoin was to eliminate the need to trust an intermediary, the system has become pointless.

It is often stated that miners don't have that power, and it is the "economic majority" that matters; or that they will never want to do it because "it would destroy the value of their investment".  That is bullshit, it is the fairy tale that has been spun to hide a problem that has no solution.  Indeed, if the miners do force a change in the protocol, those same people will spin the tale that it was no big deal, that the change was in fact approved by the majority, that it is in fact "good for bitcoin" etc. -- because, like now, the value of their investment will depend on preserving the public image of security and stability.

By the way, we know that the Chinese miners can get together and agree to a common policy, with a document signed and stamped with red stars.

This is not the way that bitcoin was supposed to be.  Implicit in the original design was the assumption that, while full relaying nodes might end up restricted to businesses that could afford to run a server 24/7,  mining would be done by ordinary clients, as an alternative to buying coins.  As long as that was the case, having the integrity of the system depend on a mining majority would actually ensure the independence and security of the system.

Satoshi was quite upset when someone published the first GPU mining program, because such greedy miners would invalidate mining by ordinary clients.  That problem unfortunately got worse and worse, ending with the current situation -- where the network is just one small step away from being run and controlled by a closed consortium of private miners.

The immediate cause of the problem was the disparity between the fixed block reward (currently 25 BTC/bk) and the market price of the coin (currently 270 USD/BTC).  That combination made mining into a business with an extremely large revenue stream, now still ~1 million USD/day  By comparison, BitPay, the largest bitcoin payment processor in 2014, processed less than 0.5 million USD/day during that year -- including payments related to mining (i.e., internal to the bitcoin system as a whole) and purchase of precious metals (which was basically investors switching from bitcoin to another investment asset).  Even assuming that BitPay processed only a fraction of all the e-payments using bitcoin, the cost of maintaining the network (including or excluding the miner's profit) is totally out of proportion to the actual use of bitcoin as a currency -- the purpose for which it was designed and implemented.

The high price of bitcoin, in turn, resulted from speculative investment, fueled by expectations of extremely high value in some vague future, based in turn on its alleged scarcity, "deflationary" character, and dreams of it capturing a significant slice of the credit card market.  While the future may still bring surprises, those claims have been largely debunked since the crash of the 2013 bubble.

Another consequence of this overvaluation of the coin is that the huge cost of mining is not borne by the users of the coin, or by its current investors, but by the new investors who are buying the coin today.  Theirs is the only money flowing into the bitcoin system: that money flows out of the system as miners' revenue (1 million USD/day), the payoff of the early investors who are reducing their holdings (an unknown amount) and part of the fees of bitcoin exchanges, payment processors, and other bitcoin services (also an unknown amount, but probably much less than 1 million USD/day).

Because of this unhealthy economic structure, the bitcoin system is creating an increasing mountain of "moral debt": the money that people have invested in bitcoins, and expect to get back with at least some profit.  Of course, there is no entity guaranteeing to pay this debt.  It is not possible to compute this "Bitcoin National Debt" (BND), because there is no way to know the price that each bitcoin holder paid for his coins; but we can tell that it is somewhere between 400 million and 17 billion USD.  The only way the current holders can recover their investment is by selling their coins to new investors; but that will only increase the BND...  Obviously this snowball rolling cannot go on forever, and it can only end in tears.

Academic interest in bitcoin only. Not owner, not trader, very skeptical of its longterm success.
iCEBREAKER
Legendary
*
Offline Offline

Activity: 2156
Merit: 1072


Crypto is the separation of Power and State.


View Profile WWW
July 08, 2015, 07:30:06 PM
 #112

Last time I checked, the top 3 pools and the top 4 Chinese pools had ~55% of the total hashpower.  The top 5 pools (the Chinese one plus the Ukranian BitFury) had over 70%.

Objectively, bitcoin failed.  Users and holders must trust that those top 5 miners will not do anything nasty.  If they conspired to put all other miners out of business, they could do it.  If they agreed to block an account forever, they could do it.  If they agreed to make some change to the protocol, they could easily force everybody do accept it.



You keep using the word "could" as if it implies 'likely' or 'easily and without consequences.'

The sun "could" suddenly/irrationally/maliciously explode and destroy all copies of the blockchain: ZOMG BITCOIN HAS OBJECTIVELY FAILED!!1!

Bitcoin, unlike Petrobras or UA or the NY/Shenzhen/Greek stock exchanges, is working perfectly.  I can easily and securely and almost instantly transfer value equivalent to millions of dollars to anyone anywhere, all for about the price of a 1st class postage stamp.

Sure, I don't have metaphysical certainty that nothing "could" possibly go wrong, but then again I'm not an obsessed try-hard buttcoiner either.   Cool


██████████
█████████████████
██████████████████████
█████████████████████████
████████████████████████████
████
████████████████████████
█████
███████████████████████████
█████
███████████████████████████
██████
████████████████████████████
██████
████████████████████████████
██████
████████████████████████████
██████
███████████████████████████
██████
██████████████████████████
█████
███████████████████████████
█████████████
██████████████
████████████████████████████
█████████████████████████
██████████████████████
█████████████████
██████████

Monero
"The difference between bad and well-developed digital cash will determine
whether we have a dictatorship or a real democracy." 
David Chaum 1996
"Fungibility provides privacy as a side effect."  Adam Back 2014
Buy and sell XMR near you
P2P Exchange Network
Buy XMR with fiat
Is Dash a scam?
JorgeStolfi
Hero Member
*****
Offline Offline

Activity: 910
Merit: 1003



View Profile
July 09, 2015, 05:17:37 AM
 #113

You keep using the word "could" as if it implies 'likely' or 'easily and without consequences.'

I think that it is very likely that, sooner or later, the miners will use their power to force changes to the protocol. 

It will not be totally trivial, but it will be much easier and quicker than the BIP66 or BIP100/BIP101 changes.  There would be no lengthy discussion on forums, blockchain voting, etc.  They cartel will just announce their decision to change the protocol with a couple of months in advance, with a suitable "for the good of bitcoin" spin.  They will put up the modified programs for download, that trigger a hard fork at a specified block number.  They will warn everybody that those who fail upgrade before the deadline will be unable to use their coins until they do.

Knowing that the cartel means what it says, most clients, nodes, services, and non-cartel miners will upgrade before the fork, and will sail smoothly through it.   The cartel will use their hashpower to kill the old branch, if some recalcitrant miners will insist on mining it; then any clients still running the old version will be unable to move their coins.  Those laggards will either upgrade (and find their coins still where they left them) or lose their coins.  And that will be it.

Quote
bitcoin is working perfectly.  I can easily and securely and almost instantly transfer value equivalent to millions of dollars to anyone anywhere, all for about the price of a 1st class postage stamp.

Indeed, I am convinced that most bitcoiners will not care about a protocol change imposed by a mining cartel, if it does not affect them directly.  In fact they will support the cartel and pretend that they approve the change, to preserve the value of their coin.  I am pretty certain that you will be among them.  If you don't have a problem with 5 pools having 70% of the power, or with the 5$ cost of your transaction being subsidized by investors, or with the growing pyramid of "debt" -- then you surely will not have a problem with a mere postponement of the next halving, or with the extinction of independent relay nodes, for example.

Academic interest in bitcoin only. Not owner, not trader, very skeptical of its longterm success.
JorgeStolfi
Hero Member
*****
Offline Offline

Activity: 910
Merit: 1003



View Profile
July 09, 2015, 06:59:06 AM
 #114

I think that it is very likely that, sooner or later, the miners will use their power to force changes to the protocol. 

Since we are predicting the future, I'm going to run with this...

...And some users won't agree with those changes. And those user will want to make transactions on the original Bitcoin block chain. And they will pay handsomely to do so. And some miners will want to earn those transaction fees so they will mine on the "old" chain. And we will have a fork. And we will have two functioning yet distinct block chains. And everyone who controlled private keys before the fork will have coins on both chains. And some exchanges will see an opportunity to gather fees on the exchange of fork coins and original bitcoins. And ultimately, the chains will survive depending on whether or not people value the properties of the protocols which produce those chains.

Personally, I can't want to see it all unfold, and I really, really want to trade some fork coins for original bitcoins.

Well, forking bitcoin would be a simple and natural solution to the scaling problem. 

However, the changes that the cartel may want to make will be such that they increase their revenue, or bring some other benefit.  In that case, the compensation that the orhodox users would be willing to pay may not be enough for the cartel to tolerate the old branch.

For example, suppose that the cartel wants to postpone the next halving for 2 years.  They could let the old chain prosper, and put some of their miners to work on it.  However, in my math, that would give them tens of millions of dollars less revenue that if they kill the old chain immediately at the fork, and put all miners to work on the new one.

Academic interest in bitcoin only. Not owner, not trader, very skeptical of its longterm success.
phelix
Legendary
*
Offline Offline

Activity: 1708
Merit: 1019



View Profile
July 09, 2015, 07:42:55 AM
 #115

Last time I checked, the top 3 pools and the top 4 Chinese pools had ~55% of the total hashpower.  The top 5 pools (the Chinese one plus the Ukranian BitFury) had over 70%.

Objectively, bitcoin failed.  Users and holders must trust that those top 5 miners will not do anything nasty.  If they conspired to put all other miners out of business, they could do it.  If they agreed to block an account forever, they could do it.
It seems you are mixing miners and pools? Pools have only short term power because miners will leave fishy pools. RBF in F2Pool was a good example for that.

Quote
Satoshi was quite upset when someone published the first GPU mining program
Do you have a link? I'm honestly interested.

Quote
Obviously this snowball rolling cannot go on forever, and it can only end in tears.
As it did with gold?

iCEBREAKER
Legendary
*
Offline Offline

Activity: 2156
Merit: 1072


Crypto is the separation of Power and State.


View Profile WWW
July 09, 2015, 12:22:28 PM
 #116

Personally, I can't want to see it all unfold, and I really, really want to trade some fork coins for original bitcoins.

Indeed, the only known possible counter to MPEX's Gavincoin Short tactic is MAD.  (Implying the only way to win is not to play.)

Well, forking bitcoin would be a simple and natural solution to the scaling problem. 

"Would be?"

There are hundreds of forks which already provide parallel capacity to augment the Main Chain, LTC being the most significant.

bitcoin is working perfectly.  I can easily and securely and almost instantly transfer value equivalent to millions of dollars to anyone anywhere, all for about the price of a 1st class postage stamp.

Indeed, I am convinced that most bitcoiners will not care about a protocol change imposed by a mining cartel, if it does not affect them directly.  In fact they will support the cartel and pretend that they approve the change, to preserve the value of their coin.  I am pretty certain that you will be among them.  If you don't have a problem with 5 pools having 70% of the power, or with the 5$ cost of your transaction being subsidized by investors, or with the growing pyramid of "debt" -- then you surely will not have a problem with a mere postponement of the next halving, or with the extinction of independent relay nodes, for example.

I do have a problem with "the 5$ cost of your transaction being subsidized by investors."

You must have missed my participation in the furious blocksize debate raging in cypherdoc's thread.

TL;DR:  My position is the network should be weaned off block subsidies ASAP, by allowing the fee market to mature (IE ossify) at 1MB by charging the highest price the market will bear, rather than continue (via larger blocks) the outrageous undercharging practice whereby users pay a nickle to use 5$ or more with of electricity/infrastructure/C&M/etc.

Sorry, it was my mistake to emphasize the value-transaction aspect of Bitcoin to the exclusion of its primary value-storage function.

Allow me to add:

bitcoin is working perfectly.  I can easily and securely and almost instantly store value equivalent to millions of dollars and access it anywhere anytime, all for about the price of a 1st class postage stamp.

The store of value function is why you are wrong about "most bitcoiners" not caring about "a protocol change imposed by a mining cartel."

Perhaps on a one-man-one-vote basis you are right, but the economic power majority of BTC (the whales) are most certainly directly affected by a 70%/5 pool coup attempt.

They simply won't allow it, and will prevent it via the mechanisms graciously explained by Holliday.

For someone who has studied BTC for so long and in such depth, your objections and concerns sound very much like the knee-jerk reactions of someone (very intelligent of course) hearing for the first time about Satoshi's whitepaper.

The system's design accounts for the scenario you believe "could" happen, and its incentive structure was calibrated to keep that theoretical possibility in the realm of imagination.

The 'ZOMGWTF if the top [n] pools collude - BTC is doomed!!1!' FUD has for years been rehashed and debunked.

And yet, there you are, proclaiming the Death Of BitcoinTM for what, the 51st time?   Tongue


██████████
█████████████████
██████████████████████
█████████████████████████
████████████████████████████
████
████████████████████████
█████
███████████████████████████
█████
███████████████████████████
██████
████████████████████████████
██████
████████████████████████████
██████
████████████████████████████
██████
███████████████████████████
██████
██████████████████████████
█████
███████████████████████████
█████████████
██████████████
████████████████████████████
█████████████████████████
██████████████████████
█████████████████
██████████

Monero
"The difference between bad and well-developed digital cash will determine
whether we have a dictatorship or a real democracy." 
David Chaum 1996
"Fungibility provides privacy as a side effect."  Adam Back 2014
Buy and sell XMR near you
P2P Exchange Network
Buy XMR with fiat
Is Dash a scam?
TransaDox
Full Member
***
Offline Offline

Activity: 219
Merit: 102


View Profile
July 09, 2015, 12:33:27 PM
 #117

Objectively, bitcoin failed.  Users and holders must trust that those top 5 miners will not do anything nasty.  If they conspired to put all other miners out of business, they could do it.  If they agreed to block an account forever, they could do it.  If they agreed to make some change to the protocol, they could easily force everybody do accept it.  There would be much cursing ang grawing of teeth, but the only choices for all users and holders would be to either accept the change, of lose their coins.  Since the whole point of bitcoin was to eliminate the need to trust an intermediary, the system has become pointless.

You know what? I think they should - before some government does when we can't do anything about it. At least for a 48hr period to demonstrate the consequences and it is a real threat that needs to be addressed. Lock the main devs bitcoin addresses for a couple of days to focus their attention; first on the testnet then on the real net. Put out a public warning a week before and goad the devs to stop them if they can. Treat it as a white-hat DOS test with full disclosure.
JorgeStolfi
Hero Member
*****
Offline Offline

Activity: 910
Merit: 1003



View Profile
July 10, 2015, 12:50:17 AM
 #118

Quote
Satoshi was quite upset when someone published the first GPU mining program
Do you have a link? I'm honestly interested.

Sorry, my mind exaggerated the memory it seems.  I cannot find his reaction to the first actual GPU miner (if there was one), but there is a well known plea of his, from Dec/2009, for a moratorium on such miners:

https://bitcointalk.org/index.php?topic=12.msg54#msg54

Quote
The average total coins generated across the network per day stays the same.  Faster machines just get a larger share than slower machines.  If everyone bought faster machines, they wouldn't get more coins than before.

We should have a gentleman's agreement to postpone the GPU arms race as long as we can for the good of the network.  It's much easer to get new users up to speed if they don't have to worry about GPU drivers and compatibility.  It's nice how anyone with just a CPU can compete fairly equally right now.

Academic interest in bitcoin only. Not owner, not trader, very skeptical of its longterm success.
JorgeStolfi
Hero Member
*****
Offline Offline

Activity: 910
Merit: 1003



View Profile
July 10, 2015, 02:39:46 AM
 #119

It seems you are mixing miners and pools? Pools have only short term power because miners will leave fishy pools. RBF in F2Pool was a good example for that.

F2Pool is still the second-largest pool, after AntPool; in spite of RBF and their role in the "Fork of July" incident (and of them saying that, sorry, but they will not change their methods).

Define "fishy".  Most likely, a miner's cartel will use its power to increase their total revenue over some future time span.  That means more money for their members.  If the pool managers conclude that their plan is worth the trouble and risk, why would the pool members dislike it?

There are hundreds of forks which already provide parallel capacity to augment the Main Chain, LTC being the most significant.

Those are "deep forks" that split before their genesis blocks.  Cheesy

I meant a hard fork with network partition and coin split, like the Beast of Apocalypse of the Anagavinists.  The fork creates two independent bitcoins ("series A" and "series B"), each with its own set of miners and nodes, and with its own blockchain.  Each blockchain is invalid by the other coin's rule, but the chains share a common prefix that is valid for both.  So the history of both coins is the same up to the fork, and just after that each person owns the same amount of coins in the same addresses, on both chains.  Each person can move either coin independently by using the proper version of software and wallet.  

Each coin will have its exchanges and market price. The price (and therefore market cap) of the original bitcoin will probably be split among the two clones.   Then, those who don't like one of the coins can sell all their holdings of the same and buy more of the other coin.  One nice effect is that the nertwork capacity of each coin will be the same as that of the original bitcoin.  So the two coins together can support twice as many users; however, to send payments across the "ocean" between them, people will have to use an exchange or a broker.

Quote
I do have a problem with "the 5$ cost of your transaction being subsidized by investors."

You must have missed my participation in the furious blocksize debate raging in cypherdoc's thread.

TL;DR:  My position is the network should be weaned off block subsidies ASAP, by allowing the fee market to mature (IE ossify) at 1MB by charging the highest price the market will bear, rather than continue (via larger blocks) the outrageous undercharging practice whereby users pay a nickle to use 5$ or more with of electricity/infrastructure/C&M/etc.
Good that you agree about the block reward problem.  But you must have missed my preaching on /r/bitcoin about the illusion of the "fee market".

The "new devs" are impatient for the network to saturate so that the "fee market" will arise, and they have invented several spiffy gadgets to handle it that they are dying to use.  No matter how people explain, they don't want to understand that

* even 80% of saturation would render the use of bitcoin a nightmare, driving users away from bitcoin and stopping its growth well before full saturation.

* when the traffic will stop growing, say at ~80% of capacity in daily average, the "traffic jams" will arise erratically at peak hours and at random variations  of demand and supply;

* the queue lengths will vary pretty fast during a jam,  and will be emptied in a few hours;

* the fees will be useless outside of the jams;

* the right fees will be impossible to predict during a jam, because each jam will be different, the queue status will vary too fast;

* the right fee that you should use to be among the first 2500 entries of the queue that will get into the next block depends on the 3000 transactions that will be issued in the next 10 minutes, by 3000 clients who are trying to choose a fee that will put their transactions ahead of yours;

* twidding the fees will not reduce the average delay by one second, only make everybody spend more money and make the individual delays more unpredictable;

* many clients will end up paying much more than the standard fee, only to wait more than if the transactions were processed first-come, first served;

* most clients -- espcially those who issue important transactions -- have better things to do with their time than sit two hours watching the queues and playing the silly "fee hopscotch" game.

It is useless to point out to them that no business in the world, from lemonade stands to airline manufacturers, uses (or could use) anything remotely like this bizarre pricing mechanism.  It is useless to explain to them that the "fee market" will not be a "fRee market", because they have this silly libertarian definition of "free market" as "a market without government regulations".

Unfortunately, they are so detached from the real world, so fired up with the "fee market" fantasy, and so anxious to see their toys at work -- that they cannot even understand how that "fee market" will transform the act of paying something with bitcoin from a mildly complicated routine into an absolutely stupid, lengthy, incomprehensible and frustrating game.

They are like kids who set fire to the house because they want to play firemen and put the filre out with their water guns.

Quote
The system's design accounts for the scenario you believe "could" happen, and its incentive structure was calibrated to keep that theoretical possibility in the realm of imagination.

No it doesn't.  From the beginning, Satoshi himself was aware, and said so clearly, that the system would work only if a majority of the mining power acted according to their selfish immediate interest of maximinzing their revenue.  If a mining majority decided to do something else, all bets were off.  He was counting on mining remaining decentralized, so that such cartels could not form.

Quote
And yet, there you are, proclaiming the Death Of BitcoinTM for what, the 51st time?   Tongue

Bitcoin has been dead for more than a year, and was very sick before that.  What is still twitching there is a bizarre and terribly expensive payment system that resembles bitcoin, and works like it for some puroses; but with a crucial difference -- it depends on 5 people not having bad ideas.

There is still some hope though: if the price crashes to below 1$, all the industrail miners will go bankrupt, and bitcoin may then return to how it was in 2009, with mining well distributed through the remaining clients.

That, if the "new devs" can be stopped and the fire can be put out before the house burns to the ground.

Academic interest in bitcoin only. Not owner, not trader, very skeptical of its longterm success.
iCEBREAKER
Legendary
*
Offline Offline

Activity: 2156
Merit: 1072


Crypto is the separation of Power and State.


View Profile WWW
July 10, 2015, 01:08:32 PM
 #120

"Fork of July"

Beast of Apocalypse of the Anagavinists

Heh, very droll.  Tres bot mots!   Cheesy

Yes, I do understand the categorical but academic difference between a chain fork and a codebase fork.  I was intentionally conflating them to illustrate their functional equivalency insofar as adding to BTC's Mainchain additional parallel capacity.


The "new devs" are impatient for the network to saturate so that the "fee market" will arise, and they have invented several spiffy gadgets to handle it that they are dying to use.  No matter how people explain, they don't want to understand that

[generic r/buttcoin litany of ReasonsTM why Bitcoin is dead (but inexplicably hasn't stopped moving yet)]

I'm not sure from where you're getting this "new" adjective.  Adam Back is BTC's grandfather, if not (part of) Satoshi Himself.

Luke-jr as been around since forever.  Ditto Garzik, etc.  AFAIK, gmax is the newest kid on the block(chain).

The ad hom is irrelevant in any case, because the claim you infer from it, that "they have invented several spiffy gadgets to handle it that they are dying to use," is not accurate.  Sidechains and Lightening are spiffy to be sure, but we are seeing them being slowly deployed via the proper (IE whitepaper->peer review->prototype->testnet->listserve feedback->BIP) process, in marked contrast to the Gavinista's insurgent tactics of going straight to the drooling masses and inciting the mob to demand Action Now.


██████████
█████████████████
██████████████████████
█████████████████████████
████████████████████████████
████
████████████████████████
█████
███████████████████████████
█████
███████████████████████████
██████
████████████████████████████
██████
████████████████████████████
██████
████████████████████████████
██████
███████████████████████████
██████
██████████████████████████
█████
███████████████████████████
█████████████
██████████████
████████████████████████████
█████████████████████████
██████████████████████
█████████████████
██████████

Monero
"The difference between bad and well-developed digital cash will determine
whether we have a dictatorship or a real democracy." 
David Chaum 1996
"Fungibility provides privacy as a side effect."  Adam Back 2014
Buy and sell XMR near you
P2P Exchange Network
Buy XMR with fiat
Is Dash a scam?
Pages: « 1 2 3 4 5 [6] 7 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!